error.txt says"Your configuration container audit settings may prevent the 'Who Changed' field from being reported correctly. Please refer to the Troubleshooting section of the product documentation for more information."

error.txt says"Your configuration container audit settings may prevent the 'Who Changed' field from being reported correctly. Please refer to the Troubleshooting section of the product documentation for more information."

" Your configuration container audit settings may prevent the 'Who Changed' field from being reported correctly. Please refer to the Troubleshooting section of the product documentation for more information. "

" Your configuration container audit settings may prevent the 'Who Changed' field from being reported correctly. Please refer to the Troubleshooting section of the product documentation for more information. "

1. Configure Object-level AD auditing for ALL AD objects (not only domain controller objects or users making changes) to audit all modifications. Please configure the following in the ADUC snap-in if you are not sure:

a. Make sure that the ADUC Advanced mode is turned on: from the main menu select View, then Advanced Features
b. Right-click the root domain object, select the Security tab, click Advanced and select the Auditing tab
c. Click Add and type Everyone. Then click OK
d. Set the ‘Apply onto’ setting as ‘This object and all child objects (default)’. On Windows Server 2008, this setting is called ‘This object and all descendant objects’.
e. Select all Successful Audit items except for the following: Full Control, List Contents, Read Permissions, Read All Properties
IMPORTANT: Do NOT click the checkbox named ‘Apply these auditing to objects and/or containers within this container only’. Otherwise no auditing settings will be propagated to child objects of the domain object and you will get incorrect 'who changed' information for them.
f.Click OK

2. You need to enable object level auditing on the containers mentioned in the error report. Please perform the following steps on the problematic domain controller(s):
a. Click Start | Run | type “ADSIedit.msc” and click OK
Note: The ADSI Edit utility is part of Windows Support Tools. It can be downloaded with the following link:http://www.microsoft...&displaylang=en
b. Right click the root node and select Connect To
c. Check Select a well known Naming Context check box and select Configuration
d. Click OK
e. Expand ‘Configuration[your.root.domain.name]’ node
f. Right-click the ‘CN=Configuration, DC=…’ node and click Properties
g. Click the Security tab and click Advanced
h. Open the ‘Auditing’ tab and Click Add
i. Type “Everyone” in the box for Enter the object name to select and click OK
j. Select all Successful items except for the following: Full Control, List Contents, Read All Properties and Read Permissions
IMPORTAT: DO NOT click the check box named Apply these auditing entries to objects and/or containers within his container only. Also, make sure the Apply onto selection indicates This object and all child objects.
k. Click OK

I hope I have been of some assistance. Please let me know if you have any further questions or issues.